Ramish Rasool

Summary

What I did

• Leading the migration of a live business from Supabase to AWS: replaced 55 row-level-security policies with API-level tenancy and wrote a 25-case cross-tenant IDOR test suite that caught a real access-control gap before launch.
• Built an idempotent ETL with reconciliation across 23 source tables (zero discrepancies on rehearsal) and a cutover runbook with 12 go/no-go criteria and a 13-step rollback to protect live bookings and payments.
• Provisioned the full AWS estate (ECS Fargate, RDS, Amplify) as 62 Terraform resources with push-to-deploy GitHub Actions over OIDC and no long-lived keys; dev environment runs at ~$41/month. Moved from part-time to full-time on early delivery.
• Configured the API to dynamically create Stripe Checkout sessions based on the organization owning the specific center.
• Designed the webhook handler to verify signatures against organization-specific signing secrets.
• Architected infrastructure including NestJS on ECS Fargate, ALB, Amplify frontends, S3 with presigned uploads, and Cloudflare DNS.
• Configured scoped deployment roles and automated Prisma migrations as one-off ECS tasks.

Results

• Architected a multi-tenant payment system where each organization in the hierarchy manages its own Stripe account.
• Secured organization-specific Stripe keys using AWS Secrets Manager instead of the database or environment configuration.
• Implemented a server-side logic to determine Stripe test or live mode, preventing clients from switching booking modes.
• Developed a reliable booking confirmation system using verified webhooks and idempotent event tracking to prevent duplicate processing.
• Managed a live business migration to Stripe including go/no-go checks and rollback procedures.
• Wrote the entire AWS estate in Terraform, managing approximately 62 resources from an empty account.
• Configured a VPC with RDS Postgres in isolated subnets and no public database endpoint.
• Implemented database access via an outbound-only EC2 host using SSM port-forwarding.
• Established CI using GitHub Actions with OIDC to eliminate long-lived AWS keys.
• Resolved a database connection failure by implementing a least-privilege database role for the application.
• Fixed a pipeline change-detection bug that skipped backend deploys on multi-commit pushes.
• Caught a real access-control gap before launch using a 25-case cross-tenant IDOR test suite.
• Achieved zero discrepancies on ETL rehearsal across 23 source tables.
• Reduced dev environment costs to ~$41/month.